<!DOCTYPE html>
<html>
<head>
	<meta charset="utf-8">
	<meta name="robots" content="noindex">

	<title>File Certificate.php</title>

	<link rel="stylesheet" href="resources/style.css?c2f33731c1948fbed7c333554678bfa68d4817da">

</head>

<body>
<div id="left">
	<div id="menu">
		<a href="index.html" title="Overview"><span>Overview</span></a>


		<div id="groups">
				<h3>Namespaces</h3>
			<ul>
				<li>
					<a href="namespace-Baidu.html">
						Baidu<span></span>
					</a>

						<ul>
				<li>
					<a href="namespace-Baidu.Duer.html">
						Duer<span></span>
					</a>

						<ul>
				<li>
					<a href="namespace-Baidu.Duer.Botsdk.html">
						Botsdk<span></span>
					</a>

						<ul>
				<li>
					<a href="namespace-Baidu.Duer.Botsdk.Card.html">
						Card					</a>

						</li>
				<li>
					<a href="namespace-Baidu.Duer.Botsdk.Directive.html">
						Directive<span></span>
					</a>

						<ul>
				<li>
					<a href="namespace-Baidu.Duer.Botsdk.Directive.AppLauncher.html">
						AppLauncher					</a>

						</li>
				<li>
					<a href="namespace-Baidu.Duer.Botsdk.Directive.AudioPlayer.html">
						AudioPlayer					</a>

						</li>
				<li>
					<a href="namespace-Baidu.Duer.Botsdk.Directive.WebBrowser.html">
						WebBrowser					</a>

						</li>
							</ul></li>
				<li>
					<a href="namespace-Baidu.Duer.Botsdk.Plugins.html">
						Plugins					</a>

						</li>
							</ul></li></ul></li></ul></li>
			</ul>
		</div>

		<hr>


		<div id="elements">
			<h3>Classes</h3>
			<ul>
				<li><a href="class-Baidu.Duer.Botsdk.Bot.html">Baidu\Duer\Botsdk\Bot</a></li>
				<li><a href="class-Baidu.Duer.Botsdk.Card.BaseCard.html">Baidu\Duer\Botsdk\Card\BaseCard</a></li>
				<li><a href="class-Baidu.Duer.Botsdk.Card.ImageCard.html">Baidu\Duer\Botsdk\Card\ImageCard</a></li>
				<li><a href="class-Baidu.Duer.Botsdk.Card.ListCard.html">Baidu\Duer\Botsdk\Card\ListCard</a></li>
				<li><a href="class-Baidu.Duer.Botsdk.Card.ListCardItem.html">Baidu\Duer\Botsdk\Card\ListCardItem</a></li>
				<li><a href="class-Baidu.Duer.Botsdk.Card.StandardCard.html">Baidu\Duer\Botsdk\Card\StandardCard</a></li>
				<li><a href="class-Baidu.Duer.Botsdk.Card.TextCard.html">Baidu\Duer\Botsdk\Card\TextCard</a></li>
				<li><a href="class-Baidu.Duer.Botsdk.Certificate.html">Baidu\Duer\Botsdk\Certificate</a></li>
				<li><a href="class-Baidu.Duer.Botsdk.Directive.AppLauncher.LaunchApp.html">Baidu\Duer\Botsdk\Directive\AppLauncher\LaunchApp</a></li>
				<li><a href="class-Baidu.Duer.Botsdk.Directive.AudioPlayer.Play.html">Baidu\Duer\Botsdk\Directive\AudioPlayer\Play</a></li>
				<li><a href="class-Baidu.Duer.Botsdk.Directive.AudioPlayer.Stop.html">Baidu\Duer\Botsdk\Directive\AudioPlayer\Stop</a></li>
				<li><a href="class-Baidu.Duer.Botsdk.Directive.BaseDirective.html">Baidu\Duer\Botsdk\Directive\BaseDirective</a></li>
				<li><a href="class-Baidu.Duer.Botsdk.Directive.WebBrowser.LaunchBrowser.html">Baidu\Duer\Botsdk\Directive\WebBrowser\LaunchBrowser</a></li>
				<li><a href="class-Baidu.Duer.Botsdk.Intercept.html">Baidu\Duer\Botsdk\Intercept</a></li>
				<li><a href="class-Baidu.Duer.Botsdk.Log.html">Baidu\Duer\Botsdk\Log</a></li>
				<li><a href="class-Baidu.Duer.Botsdk.Nlu.html">Baidu\Duer\Botsdk\Nlu</a></li>
				<li><a href="class-Baidu.Duer.Botsdk.Plugins.DuerSessionIntercept.html">Baidu\Duer\Botsdk\Plugins\DuerSessionIntercept</a></li>
				<li><a href="class-Baidu.Duer.Botsdk.Request.html">Baidu\Duer\Botsdk\Request</a></li>
				<li><a href="class-Baidu.Duer.Botsdk.Response.html">Baidu\Duer\Botsdk\Response</a></li>
				<li><a href="class-Baidu.Duer.Botsdk.Session.html">Baidu\Duer\Botsdk\Session</a></li>
			</ul>


			<h3>Traits</h3>
			<ul>
				<li><a href="class-Baidu.Duer.Botsdk.DataObject.html">Baidu\Duer\Botsdk\DataObject</a></li>
			</ul>



		</div>
	</div>
</div>

<div id="splitter"></div>

<div id="right">
<div id="rightInner">
	<form id="search">
		<input type="hidden" name="cx" value="">
		<input type="hidden" name="ie" value="UTF-8">
		<input type="text" name="q" class="text" placeholder="Search">
	</form>

	<div id="navigation">
		<ul>
			<li>
				<a href="index.html" title="Overview"><span>Overview</span></a>
			</li>
			<li>
<span>Namespace</span>			</li>
			<li>
<span>Class</span>			</li>
		</ul>
		<ul>
		</ul>
		<ul>
		</ul>
	</div>

<pre class="numbers"><code><span class="l"><a href="#1">  1: </a></span><span class="l"><a href="#2">  2: </a></span></span><span class="l"><a href="#3">  3: </a></span></span><span class="l"><a href="#4">  4: </a></span></span><span class="l"><a href="#5">  5: </a></span><span class="l"><a href="#6">  6: </a></span><span class="l"><a href="#7">  7: </a></span><span class="l"><a href="#8">  8: </a></span><span class="l"><a href="#9">  9: </a></span><span class="l"><a href="#10"> 10: </a></span></span><span class="l"><a href="#11"> 11: </a></span></span><span class="l"><a href="#12"> 12: </a></span></span><span class="l"><a href="#13"> 13: </a></span><span class="l"><a href="#14"> 14: </a></span><span class="l"><a href="#15"> 15: </a></span><span class="l"><a href="#16"> 16: </a></span><span class="l"><a href="#17"> 17: </a></span><span class="l"><a href="#18"> 18: </a></span><span class="l"><a href="#19"> 19: </a></span><span class="l"><a href="#20"> 20: </a></span><span class="l"><a href="#21"> 21: </a></span><span class="l"><a href="#22"> 22: </a></span></span><span class="l"><a href="#23"> 23: </a></span></span><span class="l"><a href="#24"> 24: </a></span></span><span class="l"><a href="#25"> 25: </a></span></span><span class="l"><a href="#26"> 26: </a></span></span><span class="l"><a href="#27"> 27: </a></span><span class="l"><a href="#28"> 28: </a></span><span class="l"><a href="#29"> 29: </a></span><span class="l"><a href="#30"> 30: </a></span><span class="l"><a href="#31"> 31: </a></span><span class="l"><a href="#32"> 32: </a></span></span><span class="l"><a href="#33"> 33: </a></span></span><span class="l"><a href="#34"> 34: </a></span></span><span class="l"><a href="#35"> 35: </a></span></span><span class="l"><a href="#36"> 36: </a></span></span><span class="l"><a href="#37"> 37: </a></span><span class="l"><a href="#38"> 38: </a></span><span class="l"><a href="#39"> 39: </a></span><span class="l"><a href="#40"> 40: </a></span><span class="l"><a href="#41"> 41: </a></span><span class="l"><a href="#42"> 42: </a></span></span><span class="l"><a href="#43"> 43: </a></span></span><span class="l"><a href="#44"> 44: </a></span></span><span class="l"><a href="#45"> 45: </a></span><span class="l"><a href="#46"> 46: </a></span><span class="l"><a href="#47"> 47: </a></span><span class="l"><a href="#48"> 48: </a></span><span class="l"><a href="#49"> 49: </a></span><span class="l"><a href="#50"> 50: </a></span><span class="l"><a href="#51"> 51: </a></span><span class="l"><a href="#52"> 52: </a></span><span class="l"><a href="#53"> 53: </a></span><span class="l"><a href="#54"> 54: </a></span><span class="l"><a href="#55"> 55: </a></span><span class="l"><a href="#56"> 56: </a></span><span class="l"><a href="#57"> 57: </a></span><span class="l"><a href="#58"> 58: </a></span><span class="l"><a href="#59"> 59: </a></span><span class="l"><a href="#60"> 60: </a></span><span class="l"><a href="#61"> 61: </a></span><span class="l"><a href="#62"> 62: </a></span><span class="l"><a href="#63"> 63: </a></span><span class="l"><a href="#64"> 64: </a></span><span class="l"><a href="#65"> 65: </a></span><span class="l"><a href="#66"> 66: </a></span><span class="l"><a href="#67"> 67: </a></span><span class="l"><a href="#68"> 68: </a></span><span class="l"><a href="#69"> 69: </a></span><span class="l"><a href="#70"> 70: </a></span></span><span class="l"><a href="#71"> 71: </a></span></span><span class="l"><a href="#72"> 72: </a></span></span><span class="l"><a href="#73"> 73: </a></span></span><span class="l"><a href="#74"> 74: </a></span><span class="l"><a href="#75"> 75: </a></span><span class="l"><a href="#76"> 76: </a></span><span class="l"><a href="#77"> 77: </a></span><span class="l"><a href="#78"> 78: </a></span><span class="l"><a href="#79"> 79: </a></span><span class="l"><a href="#80"> 80: </a></span><span class="l"><a href="#81"> 81: </a></span><span class="l"><a href="#82"> 82: </a></span><span class="l"><a href="#83"> 83: </a></span><span class="l"><a href="#84"> 84: </a></span><span class="l"><a href="#85"> 85: </a></span><span class="l"><a href="#86"> 86: </a></span><span class="l"><a href="#87"> 87: </a></span><span class="l"><a href="#88"> 88: </a></span><span class="l"><a href="#89"> 89: </a></span><span class="l"><a href="#90"> 90: </a></span><span class="l"><a href="#91"> 91: </a></span><span class="l"><a href="#92"> 92: </a></span><span class="l"><a href="#93"> 93: </a></span><span class="l"><a href="#94"> 94: </a></span><span class="l"><a href="#95"> 95: </a></span></span><span class="l"><a href="#96"> 96: </a></span></span><span class="l"><a href="#97"> 97: </a></span></span><span class="l"><a href="#98"> 98: </a></span></span><span class="l"><a href="#99"> 99: </a></span><span class="l"><a href="#100">100: </a></span><span class="l"><a href="#101">101: </a></span><span class="l"><a href="#102">102: </a></span><span class="l"><a href="#103">103: </a></span><span class="l"><a href="#104">104: </a></span><span class="l"><a href="#105">105: </a></span><span class="l"><a href="#106">106: </a></span><span class="l"><a href="#107">107: </a></span><span class="l"><a href="#108">108: </a></span><span class="l"><a href="#109">109: </a></span><span class="l"><a href="#110">110: </a></span><span class="l"><a href="#111">111: </a></span></span><span class="l"><a href="#112">112: </a></span></span><span class="l"><a href="#113">113: </a></span></span><span class="l"><a href="#114">114: </a></span><span class="l"><a href="#115">115: </a></span><span class="l"><a href="#116">116: </a></span><span class="l"><a href="#117">117: </a></span><span class="l"><a href="#118">118: </a></span><span class="l"><a href="#119">119: </a></span><span class="l"><a href="#120">120: </a></span><span class="l"><a href="#121">121: </a></span><span class="l"><a href="#122">122: </a></span><span class="l"><a href="#123">123: </a></span><span class="l"><a href="#124">124: </a></span><span class="l"><a href="#125">125: </a></span></code></pre>
<pre class="code"><code><span id="1" class="l"><span class="xlang">&lt;?php</span>
</span><span id="2" class="l"><span class="php-comment">/**
</span></span><span id="3" class="l"><span class="php-comment"> * 认证
</span></span><span id="4" class="l"><span class="php-comment"> * @author yuanpeng01@baidu.com
</span></span><span id="5" class="l"><span class="php-comment"> **/</span>
</span><span id="6" class="l"><span class="php-keyword1">namespace</span> Baidu\Duer\Botsdk;
</span><span id="7" class="l">
</span><span id="8" class="l"><span class="php-keyword1">class</span> Certificate{
</span><span id="9" class="l">    <span class="php-keyword1">private</span> <span class="php-var">$verifyRequestSign</span> = <span class="php-keyword1">false</span>;
</span><span id="10" class="l">    <span class="php-comment">/**
</span></span><span id="11" class="l"><span class="php-comment">     * @param string $privateKeyContent 私钥内容，使用监控统计功能或者推送功能需要提供
</span></span><span id="12" class="l"><span class="php-comment">     * @return null
</span></span><span id="13" class="l"><span class="php-comment">     */</span>
</span><span id="14" class="l">    <span class="php-keyword1">public</span> <span class="php-keyword1">function</span> __construct(<span class="php-var">$privateKeyContent</span> = <span class="php-quote">''</span>) {
</span><span id="15" class="l">        <span class="php-comment">//TODO data: requestbody + timespan</span>
</span><span id="16" class="l">        <span class="php-comment">//$this-&gt;data = json_encode($request-&gt;getData());</span>
</span><span id="17" class="l">        <span class="php-var">$this</span>-&gt;data = <span class="php-keyword2">file_get_contents</span>(<span class="php-quote">&quot;php://input&quot;</span>);
</span><span id="18" class="l">        <span class="php-var">$this</span>-&gt;privateKey = <span class="php-var">$privateKeyContent</span>;
</span><span id="19" class="l">        <span class="php-var">$this</span>-&gt;verifyRequestSign = <span class="php-keyword1">false</span>;
</span><span id="20" class="l">    }
</span><span id="21" class="l">
</span><span id="22" class="l">    <span class="php-comment">/**
</span></span><span id="23" class="l"><span class="php-comment">     * 开启验证请求参数签名，阻止非法请求
</span></span><span id="24" class="l"><span class="php-comment">     *
</span></span><span id="25" class="l"><span class="php-comment">     * @param null
</span></span><span id="26" class="l"><span class="php-comment">     * @return null
</span></span><span id="27" class="l"><span class="php-comment">     */</span>
</span><span id="28" class="l">    <span class="php-keyword1">public</span> <span class="php-keyword1">function</span> enableVerifyRequestSign() {
</span><span id="29" class="l">        <span class="php-var">$this</span>-&gt;verifyRequestSign = <span class="php-keyword1">true</span>; 
</span><span id="30" class="l">    }
</span><span id="31" class="l">
</span><span id="32" class="l">    <span class="php-comment">/**
</span></span><span id="33" class="l"><span class="php-comment">     * 关闭验证请求参数签名
</span></span><span id="34" class="l"><span class="php-comment">     *
</span></span><span id="35" class="l"><span class="php-comment">     * @param null
</span></span><span id="36" class="l"><span class="php-comment">     * @return null
</span></span><span id="37" class="l"><span class="php-comment">     */</span>
</span><span id="38" class="l">    <span class="php-keyword1">public</span> <span class="php-keyword1">function</span> disableVerifyRequestSign() {
</span><span id="39" class="l">        <span class="php-var">$this</span>-&gt;verifyRequestSign = <span class="php-keyword1">false</span>; 
</span><span id="40" class="l">    }
</span><span id="41" class="l">
</span><span id="42" class="l">    <span class="php-comment">/**
</span></span><span id="43" class="l"><span class="php-comment">     * @param null
</span></span><span id="44" class="l"><span class="php-comment">     * @return resource
</span></span><span id="45" class="l"><span class="php-comment">     */</span>
</span><span id="46" class="l">    <span class="php-keyword1">private</span> <span class="php-keyword1">function</span> getRequestPublicKey() {
</span><span id="47" class="l">        <span class="php-comment">//TODO get from head </span>
</span><span id="48" class="l">        <span class="php-comment">//$filename = dirname(__file__).'/cacert.pem';</span>
</span><span id="49" class="l">        <span class="php-var">$filename</span> = <span class="php-var">$_SERVER</span>[<span class="php-quote">'HTTP_SIGNATUREURL'</span>];
</span><span id="50" class="l">        <span class="php-keyword1">if</span>(!<span class="php-var">$filename</span>) {
</span><span id="51" class="l">            <span class="php-keyword1">return</span>; 
</span><span id="52" class="l">        }
</span><span id="53" class="l">
</span><span id="54" class="l">        <span class="php-var">$cache</span> = <span class="php-keyword2">dirname</span>(__file__).<span class="php-quote">'/'</span>.<span class="php-keyword2">md5</span>(<span class="php-var">$filename</span>);
</span><span id="55" class="l">        <span class="php-var">$content</span> = <span class="php-quote">''</span>;
</span><span id="56" class="l">        <span class="php-keyword1">if</span>(!<span class="php-keyword2">file_exists</span>(<span class="php-var">$cache</span>)) {
</span><span id="57" class="l">            <span class="php-var">$content</span> = <span class="php-keyword2">file_get_contents</span>(<span class="php-var">$filename</span>);
</span><span id="58" class="l">            <span class="php-keyword1">if</span>(!<span class="php-var">$content</span>) {
</span><span id="59" class="l">                <span class="php-keyword1">return</span>; 
</span><span id="60" class="l">            }
</span><span id="61" class="l">
</span><span id="62" class="l">            <span class="php-keyword2">file_put_contents</span>(<span class="php-var">$cache</span>, <span class="php-var">$content</span>);
</span><span id="63" class="l">        }
</span><span id="64" class="l">
</span><span id="65" class="l">        <span class="php-var">$content</span> = <span class="php-keyword2">file_get_contents</span>(<span class="php-var">$cache</span>); 
</span><span id="66" class="l">
</span><span id="67" class="l">        <span class="php-keyword1">return</span> <span class="php-keyword2">openssl_pkey_get_public</span>(<span class="php-var">$content</span>);
</span><span id="68" class="l">    }
</span><span id="69" class="l">
</span><span id="70" class="l">    <span class="php-comment">/**
</span></span><span id="71" class="l"><span class="php-comment">     * @desc 验证请求者是否合法
</span></span><span id="72" class="l"><span class="php-comment">     * @param null
</span></span><span id="73" class="l"><span class="php-comment">     * @return boolean
</span></span><span id="74" class="l"><span class="php-comment">     */</span>
</span><span id="75" class="l">    <span class="php-keyword1">public</span> <span class="php-keyword1">function</span> verifyRequest() {
</span><span id="76" class="l">        <span class="php-keyword1">if</span>(!<span class="php-var">$this</span>-&gt;verifyRequestSign) {
</span><span id="77" class="l">            <span class="php-keyword1">return</span> <span class="php-keyword1">true</span>; 
</span><span id="78" class="l">        }
</span><span id="79" class="l">
</span><span id="80" class="l">        <span class="php-var">$publicKey</span> = <span class="php-var">$this</span>-&gt;getRequestPublicKey(); 
</span><span id="81" class="l">        <span class="php-keyword1">if</span>(!<span class="php-var">$publicKey</span> || !<span class="php-var">$this</span>-&gt;data) {
</span><span id="82" class="l">            <span class="php-keyword1">return</span> <span class="php-keyword1">false</span>; 
</span><span id="83" class="l">        }
</span><span id="84" class="l">
</span><span id="85" class="l">        <span class="php-var">$encryptedData</span> = <span class="php-quote">''</span>;
</span><span id="86" class="l">        <span class="php-comment">// 公钥解密</span>
</span><span id="87" class="l">        <span class="php-var">$verify</span> = <span class="php-keyword2">openssl_verify</span>(<span class="php-var">$this</span>-&gt;data, <span class="php-keyword2">base64_decode</span>(<span class="php-var">$this</span>-&gt;getRequestSig()), <span class="php-var">$publicKey</span>, OPENSSL_ALGO_SHA1);
</span><span id="88" class="l">
</span><span id="89" class="l">        <span class="php-keyword1">return</span> <span class="php-var">$verify</span> == <span class="php-num">1</span>;
</span><span id="90" class="l">        <span class="php-comment">//openssl_public_decrypt(base64_decode($this-&gt;getRequestSig()), $encryptedData, $publicKey);</span>
</span><span id="91" class="l">        <span class="php-comment">//$sig = sha1($this-&gt;data);</span>
</span><span id="92" class="l">        <span class="php-comment">//return $encryptedData == $sig;</span>
</span><span id="93" class="l">    }
</span><span id="94" class="l">
</span><span id="95" class="l">    <span class="php-comment">/**
</span></span><span id="96" class="l"><span class="php-comment">     * 生成签名，当使用DuerOS统计功能或者推送消息
</span></span><span id="97" class="l"><span class="php-comment">     * @param string $content 待签名内容
</span></span><span id="98" class="l"><span class="php-comment">     * @return string|boolean
</span></span><span id="99" class="l"><span class="php-comment">     */</span>
</span><span id="100" class="l">    <span class="php-keyword1">public</span> <span class="php-keyword1">function</span> getSig(<span class="php-var">$content</span>) {
</span><span id="101" class="l">        <span class="php-keyword1">if</span>(!<span class="php-var">$this</span>-&gt;privateKey || !<span class="php-var">$content</span>) {
</span><span id="102" class="l">            <span class="php-keyword1">return</span> <span class="php-keyword1">false</span>;
</span><span id="103" class="l">        }
</span><span id="104" class="l">        <span class="php-var">$privateKey</span> = <span class="php-keyword2">openssl_pkey_get_private</span>(<span class="php-var">$this</span>-&gt;privateKey, <span class="php-quote">''</span>);
</span><span id="105" class="l">        <span class="php-var">$encryptedData</span> = <span class="php-quote">''</span>;
</span><span id="106" class="l">        <span class="php-comment">// 私钥加密</span>
</span><span id="107" class="l">        <span class="php-keyword2">openssl_sign</span>(<span class="php-var">$content</span>, <span class="php-var">$encryptedData</span>, <span class="php-var">$privateKey</span>, OPENSSL_ALGO_SHA1);
</span><span id="108" class="l">        <span class="php-keyword1">return</span> <span class="php-keyword2">base64_encode</span>(<span class="php-var">$encryptedData</span>);
</span><span id="109" class="l">    }
</span><span id="110" class="l">
</span><span id="111" class="l">    <span class="php-comment">/**
</span></span><span id="112" class="l"><span class="php-comment">     * @param null
</span></span><span id="113" class="l"><span class="php-comment">     * @return string
</span></span><span id="114" class="l"><span class="php-comment">     */</span>
</span><span id="115" class="l">    <span class="php-keyword1">private</span> <span class="php-keyword1">function</span> getRequestSig() {
</span><span id="116" class="l">        <span class="php-comment">//TODO: get from http request</span>
</span><span id="117" class="l">        <span class="php-keyword1">return</span>  <span class="php-var">$_SERVER</span>[<span class="php-quote">'HTTP_SIGNATURE'</span>];
</span><span id="118" class="l">
</span><span id="119" class="l">        <span class="php-comment">//for test</span>
</span><span id="120" class="l">        <span class="php-comment">//return $this-&gt;getSig(file_get_contents(dirname(__file__).'/privkey.pem')); </span>
</span><span id="121" class="l">    }
</span><span id="122" class="l">}
</span><span id="123" class="l">
</span><span id="124" class="l">
</span><span id="125" class="l"></span></code></pre>

	<div id="footer">
		 API documentation generated by <a href="http://apigen.org">ApiGen</a>
	</div>
</div>
</div>
<script src="resources/combined.js?8e019fba243831d6b27f89d27937fe4035b5a701"></script>
<script src="elementlist.js?3888e9a61fd3a5aab45265429fa1749f6d59ce9e"></script>
</body>
</html>
